$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: KxuyjYGW1OkvpuV2z+/CzorAzkg60ieh5/Nl2x/MjiE= Subject key identifier: 37:BE:F5:FD:F1:D9:0A:9F:A1:9F:80:86:A1:6E:96:96:20:BE:9C:ED Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 0CDB9B946017A8BA6C4C2BA2AD6BB9E0E3BC396C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: 96 Signing time: Thu 07 Aug 2025 21:33:02 +0000 Manifest this update: Thu 07 Aug 2025 21:28:02 +0000 Manifest next update: Fri 08 Aug 2025 23:22:02 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: RV9hOVX8RO9guP0nH/8qgBltD8pnU4l7rMFFOyuLZUg=) 3: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) 4: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 23:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:db:9b:94:60:17:a8:ba:6c:4c:2b:a2:ad:6b:b9:e0:e3:bc:39:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Aug 7 21:28:02 2025 GMT Not After : Aug 8 23:22:02 2025 GMT Subject: CN=37BEF5FDF1D90A9FA19F8086A16E969620BE9CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:76:c8:62:a2:bd:9f:2d:04:90:38:f6:a5: 81:30:62:14:b9:ba:82:30:0d:ca:0a:0a:80:bd:75: a1:7e:a0:21:d1:8c:5f:34:6e:e3:63:e2:97:5b:d6: e0:c5:f9:21:7e:ec:51:4b:88:32:cd:04:fb:ab:9d: 78:2b:e8:ac:a8:54:75:09:93:17:21:ee:9e:2f:18: 70:a4:bd:38:64:ba:de:df:4f:fa:6f:94:52:bb:19: bd:17:b8:17:68:f4:a5:cc:f0:16:ec:bc:73:90:ac: 94:c8:b1:75:cf:a6:9e:73:7d:a6:4f:60:84:54:e7: 25:eb:2d:03:31:99:6f:b7:08:4d:fe:f7:1e:2d:cc: b0:c4:49:ce:0e:43:06:39:02:4a:ae:fe:d0:e5:2d: 70:48:09:2b:3d:8c:93:57:b9:c2:c7:24:91:a4:57: 62:59:10:01:27:9f:51:e6:85:95:10:57:b6:de:08: 98:c6:db:05:58:4d:f5:db:0e:ce:64:97:e7:db:11: 83:77:aa:ce:dc:a9:5e:f8:55:6d:55:0c:ea:70:de: fc:6d:4e:e8:3c:8b:ac:f5:66:48:23:15:6c:38:6e: 90:6d:85:7d:d4:29:78:f3:e1:10:41:5e:05:17:b9: 1d:07:83:c0:a4:1e:8c:24:30:d8:f4:45:4d:a9:f9: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BE:F5:FD:F1:D9:0A:9F:A1:9F:80:86:A1:6E:96:96:20:BE:9C:ED X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ad:af:eb:13:ff:b9:65:b6:2e:64:ca:6e:65:9a:e3:d9:88: 31:aa:2b:13:cd:6b:16:6f:57:e0:99:81:bd:9b:6d:4b:b0:75: bf:4c:1e:44:1e:73:56:a1:57:70:aa:fa:61:17:99:4d:ff:62: d2:06:67:7e:9a:57:63:90:33:28:14:46:7e:da:4d:ba:2d:70: a9:b0:0e:be:83:86:8f:0f:d5:08:35:ee:c1:3f:67:5b:e7:78: d6:bc:ee:c4:99:09:78:4e:06:f6:c0:2b:35:bf:3d:37:a3:74: 2d:41:09:70:39:55:83:b9:d8:6c:bd:c2:6e:14:2d:12:7e:69: 6e:84:9e:87:ca:fd:f4:24:b9:6a:4e:71:cb:ab:c5:73:9c:39: 66:1b:6d:f7:59:9c:19:b0:19:f4:fe:46:de:a7:11:66:8e:48: 03:fb:82:bf:ae:52:1d:99:ca:8f:41:54:2d:b7:fb:d8:7b:7e: fb:ad:0f:1c:a8:da:c9:b5:43:d7:96:5b:ec:c2:25:62:d6:13: 5f:f5:f6:11:91:7a:e8:bd:13:ec:a5:cb:2e:ac:b0:fa:bb:c9: a7:64:d0:d5:2f:6e:a7:99:fd:6c:9a:f3:c1:46:ab:98:e5:92: 24:36:91:67:62:08:e7:70:67:e3:26:b7:b6:ab:55:b4:0f:7b: 75:2a:99:20 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDNublGAXqLpsTCuirWu54OO8OWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA4MDcyMTI4MDJaFw0yNTA4MDgyMzIyMDJaMDMxMTAvBgNV BAMTKDM3QkVGNUZERjFEOTBBOUZBMTlGODA4NkExNkU5Njk2MjBCRTlDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/XbIYqK9ny0EkDj2pYEwYhS5 uoIwDcoKCoC9daF+oCHRjF80buNj4pdb1uDF+SF+7FFLiDLNBPurnXgr6KyoVHUJ kxch7p4vGHCkvThkut7fT/pvlFK7Gb0XuBdo9KXM8BbsvHOQrJTIsXXPpp5zfaZP YIRU5yXrLQMxmW+3CE3+9x4tzLDESc4OQwY5Akqu/tDlLXBICSs9jJNXucLHJJGk V2JZEAEnn1HmhZUQV7beCJjG2wVYTfXbDs5kl+fbEYN3qs7cqV74VW1VDOpw3vxt Tug8i6z1ZkgjFWw4bpBthX3UKXjz4RBBXgUXuR0Hg8CkHowkMNj0RU2p+fBvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUN771/fHZCp+hn4CGoW6WliC+nO0wHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCira/r E/+5ZbYuZMpuZZrj2YgxqisTzWsWb1fgmYG9m21LsHW/TB5EHnNWoVdwqvphF5lN /2LSBmd+mldjkDMoFEZ+2k26LXCpsA6+g4aPD9UINe7BP2db53jWvO7EmQl4Tgb2 wCs1vz03o3QtQQlwOVWDudhsvcJuFC0SfmluhJ6Hyv30JLlqTnHLq8VznDlmG233 WZwZsBn0/kbepxFmjkgD+4K/rlIdmcqPQVQtt/vYe377rQ8cqNrJtUPXllvswiVi 1hNf9fYRkXrovRPspcsurLD6u8mnZNDVL26nmf1smvPBRquY5ZIkNpFnYgjncGfj Jre2q1W0D3t1Kpkg -----END CERTIFICATE-----Generated at Fri Aug 8 10:09:57 2025 by rpki-client